6703 matches found
CVE-2011-3122
CVE-2011-3122 affects WordPress 3.1.x (before 3.1.3) and WordPress 3.2 Beta 2, with media/security-related issues described as unspecified in the initial record. The connected advisories confirm multiple vulnerabilities across WordPress releases and recommend upgrading to newer upstream versions ...
Open Handset Alliance Android 2.3.43.1 - Browser Sandbox Security Bypass
Open Handset Alliance Android 2.3.43.1 - Browser Sandbox Security Bypass source: https://www.securityfocus.com/bid/48954/info Open Handset Alliance Android is prone to a vulnerability that may allow a bypass of the browser sandbox. Successful exploits will allow attackers to execute arbitrary...
CVE-2011-2197
The cross-site scripting XSS prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a...
CVE-2011-1334
Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...
html_edit CMS 3.1.x Cross Site Request Forgery
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
CVE-2011-0904
CVE-2011-0904 affects Vino’s vino-server, specifically the rfbSendFramebufferUpdate path in server/libvncserver/rfbserver.c. When raw encoding is used, remote authenticated users may trigger an out-of-bounds memory access by sending a large X or Y position in a framebuffer update, causing a daemo...
Mozilla use after free flaw (MFSA 2011-12)
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...
Mozilla Thunderbird 3.1 < 3.1.10 Multiple Vulnerabilities
The installed version of Thunderbird 3.1 is earlier than 3.1.10. Such versions are potentially affected by the following security issues : - An error in the resource protocol can allow directory traversal. CVE-2011-0071 - Multiple memory safety issues can lead to application crashes and possibly...
WordPress Spellchecker Plugin 3.1 - Local and Remote File Include Vulnerabilities
This Spellchecker plugin's "general.php" parameter is prone to remote file include and local file include vulnerabilities because of application's failure to sufficiently clean up user-supplied input. These issues allow an attacker to execute arbitrary local and remote scripts in the context of t...
Mozilla crash caused by corrupted JPEG image (MFSA 2011-09)
Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...
SA-CONTRIB-2011-012 - Spaces - Access bypass
The Spaces module makes sitewide configuration options available to be overridden by individual "spaces" on a Drupal site. Spaces provides a Views module access plugin that does not properly check its permission setting which may allow underprivileged users to visit certain pages. This...
Maxthon Browser v3.0.20.1000 .ref .replace DOS
Exploit for windows platform in category dos / poc  Exploit Title: Maxthon Browser v3.0.20.1000 .ref .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://dl.maxthon.com/mx3/mx3.0.20.3000.exe Version: v3.0.20.1000 Tested on: Windows xp sp3 ,windows 7...
Google Chrome 8.0.552.237 Denial Of Service
Exploit Title: Google Chrome v8.0.552.237 .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.google.com/chrome Version: v8.0.552.237 Tested on: Windows xp sp3 ,windows 7 ,linux running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail----...
Design/Logic Flaw
Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote attackers to obtain access to arbitrary accounts via unspecified vectors,...
Design/Logic Flaw
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...
CVE-2011-0507
The CVE-2011-0507 issue affects BlackMoon FTP Server. A remote attacker can cause a denial of service (crash) by sending a large number of PORT commands with long arguments, triggering a NULL pointer dereference. Affected versions include BlackMoon FTP Server 3.1 Build 1735/1736 and potentially e...
Blackmoon FTP 3.1 Build 17351736 - Denial of Service
Blackmoon FTP 3.1 Build 17351736 - Denial of Service !/usr/bin/python Exploit Title: BlackmoonFTP Server DOS Date: 12/28/2010 Author: Craig Freyman cd1zz Software Link: http://www.mediafire.com/?bnc4d00myymmx55 Version: 3.1 Release 6 - Build 1735 and 1736 Tested On: Windows XP SP3 Vendor Contacte...
Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service
!/usr/bin/python Exploit Title: BlackmoonFTP Server DOS Date: 12/28/2010 Author: Craig Freyman cd1zz Software Link: http://www.mediafire.com/?bnc4d00myymmx55 Version: 3.1 Release 6 - Build 1735 and 1736 Tested On: Windows XP SP3 Vendor Contacted: 12/28/2010 Vendor Fixed: 1/13/2011 import socket...